search

godaddy / jiractl

A command-line tool for managing Jira
MIT License
56 stars 7 forks source link

Password is stored in plain text on disk #1

Open basemath opened 6 years ago

basemath commented 6 years ago

The config file saved in {homeDir}/.jiractl/config.json stores the user password in plaintext.

An alternative way to keep the user from having to enter credentials every time could be to use auth tokens like cookies.

ealun commented 6 years ago

@basemath that's a good idea; would you be up for contributing the fix?

basemath commented 6 years ago

@ealun it's possible, but I can't make any commitments/promises right now :)

cfellin1 commented 6 years ago

@ealun I could look into this!

basemath commented 6 years ago

@ealun @cfellin1 A good solution might be to use os-provided keychains like git does: https://git-scm.com/book/en/v2/Git-Tools-Credential-Storage